Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread Nate McCall
+1 On Tue, Nov 16, 2021 at 8:43 AM Branimir Lambov wrote: > Hi everyone, > > I would like to start a vote on this CEP. > > Proposal: > > https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-17%3A+SSTable+format+API > > Discussion: > >

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-15 Thread J. D. Jordan
Another comment here. I tried to find the patch to check but couldn’t find it linked to the ticket. If it is not already, given the TDE key class is pluggable in the yaml, when a file is written everything need to instantiate the class to decrypt it should be in the metadata. Just like happens

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-15 Thread Bowen Song
The second question is about key rotation. If an operator needs to roll the key because it was compromised or there is some policy around that, we should be able to provide some way to rotate it. Our idea is to write a tool (either a subcommand of nodetool (rewritesstables)

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-15 Thread bened...@apache.org
If decrypting before transmission we’ll want to require the cluster to have an internode authenticator setup, else a nefarious process could simply ask for data to be streamed to it to circumvent the encryption. I agree it would be nice to have the nodes share the secret some way to avoid the

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-15 Thread Jeremiah D Jordan
> On Nov 15, 2021, at 2:25 PM, Stefan Miklosovic > wrote: > > On Mon, 15 Nov 2021 at 19:42, Jeremiah D Jordan > mailto:jeremiah.jor...@gmail.com>> wrote: >> >> >> >>> On Nov 14, 2021, at 3:53 PM, Stefan Miklosovic >>> wrote: >>> >>> Hey, >>> >>> there are two points we are not

Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread J. D. Jordan
+1 nb > On Nov 15, 2021, at 1:47 PM, Brandon Williams wrote: > > +1 > >> On Mon, Nov 15, 2021 at 1:43 PM Branimir Lambov wrote: >> >> Hi everyone, >> >> I would like to start a vote on this CEP. >> >> Proposal: >>

Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread David Capwell
+1 > On Nov 15, 2021, at 12:18 PM, bened...@apache.org wrote: > > +1 > > From: Brandon Williams > Date: Monday, 15 November 2021 at 19:47 > To: dev@cassandra.apache.org > Subject: Re: [VOTE] CEP-17: SSTable format API > +1 > > On Mon, Nov 15, 2021 at 1:43 PM Branimir Lambov wrote: >> >> Hi

Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread Ekaterina Dimitrova
+1 On Mon, 15 Nov 2021 at 15:51, bened...@apache.org wrote: > +1 > > From: Brandon Williams > Date: Monday, 15 November 2021 at 19:47 > To: dev@cassandra.apache.org > Subject: Re: [VOTE] CEP-17: SSTable format API > +1 > > On Mon, Nov 15, 2021 at 1:43 PM Branimir Lambov > wrote: > > > > Hi

Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread Jeff Jirsa
+1 On Mon, Nov 15, 2021 at 11:43 AM Branimir Lambov wrote: > Hi everyone, > > I would like to start a vote on this CEP. > > Proposal: > > https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-17%3A+SSTable+format+API > > Discussion: > >

Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread bened...@apache.org
+1 From: Brandon Williams Date: Monday, 15 November 2021 at 19:47 To: dev@cassandra.apache.org Subject: Re: [VOTE] CEP-17: SSTable format API +1 On Mon, Nov 15, 2021 at 1:43 PM Branimir Lambov wrote: > > Hi everyone, > > I would like to start a vote on this CEP. > > Proposal: >

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-15 Thread Stefan Miklosovic
On Mon, 15 Nov 2021 at 19:42, Jeremiah D Jordan wrote: > > > > > On Nov 14, 2021, at 3:53 PM, Stefan Miklosovic > > wrote: > > > > Hey, > > > > there are two points we are not completely sure about. > > > > The first one is streaming. If there is a cluster of 5 nodes, each > > node has its own

Re: [VOTE] CEP-17: SSTable format API

2021-11-15 Thread Brandon Williams
+1 On Mon, Nov 15, 2021 at 1:43 PM Branimir Lambov wrote: > > Hi everyone, > > I would like to start a vote on this CEP. > > Proposal: > https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-17%3A+SSTable+format+API > > Discussion: >

[VOTE] CEP-17: SSTable format API

2021-11-15 Thread Branimir Lambov
Hi everyone, I would like to start a vote on this CEP. Proposal: https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-17%3A+SSTable+format+API Discussion: https://lists.apache.org/thread.html/r636bebcab4e678dbee042285449193e8e75d3753200a1b404fcc7196%40%3Cdev.cassandra.apache.org%3E The

Re: [DISCUSS] CEP-17: SSTable format API (CASSANDRA-17056)

2021-11-15 Thread Branimir Lambov
Looks like the discussion is settled down. I am moving forward to putting this proposal to a vote. Regards, Branimir On Mon, Nov 15, 2021 at 7:28 PM David Capwell wrote: > Works for me > > > On Nov 15, 2021, at 4:21 AM, Jacek Lewandowski < > lewandowski.ja...@gmail.com> wrote: > > > > I'd put

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-15 Thread Jeremiah D Jordan
> On Nov 14, 2021, at 3:53 PM, Stefan Miklosovic > wrote: > > Hey, > > there are two points we are not completely sure about. > > The first one is streaming. If there is a cluster of 5 nodes, each > node has its own unique encryption key. Hence, if a SSTable is stored > on a disk with the

Re: [DISCUSS] CEP-17: SSTable format API (CASSANDRA-17056)

2021-11-15 Thread David Capwell
Works for me > On Nov 15, 2021, at 4:21 AM, Jacek Lewandowski > wrote: > > I'd put it another way - the scope is to make it possible to provide a new > implementation of sstable format without the necessity to refactor > Cassandra code. It implies a contract about the responsibilities of

Re: [DISCUSS] Mentoring newcomers

2021-11-15 Thread Jacek Lewandowski
I'm in - - -- --- - - Jacek Lewandowski On Mon, Nov 15, 2021 at 7:34 AM Berenguer Blasi wrote: > I'm in as well > > On 14/11/21 14:55, Joshua McKenzie wrote: > > Sign me up. > > > > > > On Fri, Nov 12, 2021 at 4:38 PM David Capwell > > > wrote: > > > >> I am cool

Re: [DISCUSS] CEP-17: SSTable format API (CASSANDRA-17056)

2021-11-15 Thread Jacek Lewandowski
I'd put it another way - the scope is to make it possible to provide a new implementation of sstable format without the necessity to refactor Cassandra code. It implies a contract about the responsibilities of sstable format implementation so that the rest of the code can rely on that, and only on

Re: [VOTE] CEP-3: Guardrails

2021-11-15 Thread Andrés de la Peña
The vote passes with 12 +1 votes and no -1 votes. I'll shortly open some tickets to start implementing guardrails. On Fri, 12 Nov 2021 at 14:51, Joshua McKenzie wrote: > +1 > > On Thu, Nov 11, 2021 at 12:06 PM David Capwell > > wrote: > > > +1 > > > > > On Nov 11, 2021, at 7:10 AM, Sumanth